Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:49

General

  • Target

    039c30efe92ac612b23f0ce9f7128c41.pdf

  • Size

    84KB

  • MD5

    039c30efe92ac612b23f0ce9f7128c41

  • SHA1

    1a905b8e3f92f5860cee61ea5c1a27664f94d551

  • SHA256

    3a1c2b0d0876a40ba1e2ddbf53039c332cd31aa23a172a3777fc116e6691f73a

  • SHA512

    6dddb75baea00f9316710a95bad25c205c9bac7a600ba09062498ada0c4e85608b984465eb67742dc1d1859782ed91c133a24a27c0cad5fca2947a262b520fb2

  • SSDEEP

    1536:MUT3MCzHTBBpSpVu6fVSKrofE6mNWeALcWX6cGtI2IWspORtsB:n4VnfVSdfE666LD6cGtI2jRQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\039c30efe92ac612b23f0ce9f7128c41.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6624f027e61b218c45d5f9356afe203e

    SHA1

    f6302ec29f4cbe9a36ecb49da6fa1c4df20a00ec

    SHA256

    8ade874501e324ac3c603ef5efc576d823385ad8764fcb9bd05f0d76107c78bb

    SHA512

    8d34b81589eafd26404114de94ca5c57bc52456ea61af42fd72f2f250af22887cbdd72516f7f3b1fde9b0bb13b6867615f0c5a48bda3c1a457fc3bd3dd144e05